jjb/lf-maven-jobs.yaml

   1 ---
   2 # This file contains job templates for Maven projects.
   3
   4 ##########
   5 # Macros #
   6 ##########
   7
   8 - builder:
   9     name: lf-maven-build
  10     builders:
  11       - inject:
  12           properties-content: "MAVEN_GOALS={mvn-goals}"
  13       - shell: !include-raw-escape:
  14           - ../shell/common-variables.sh
  15           - ../shell/maven-build.sh
  16
  17 - builder:
  18     name: lf-maven-deploy
  19     builders:
  20       - shell: !include-raw:
  21           - ../shell/common-variables.sh
  22           - ../shell/maven-deploy.sh
  23
  24 - builder:
  25     name: lf-maven-versions-plugin
  26     builders:
  27       - conditional-step:
  28           condition-kind: boolean-expression
  29           condition-expression: "{maven-versions-plugin}"
  30           steps:
  31             - inject:
  32                 properties-file: "{version-properties-file}"
  33             - maven-target:
  34                 maven-version: "{mvn-version}"
  35                 pom: "{mvn-pom}"
  36                 goals: "versions:set versions:update-child-modules versions:commit -B"
  37                 properties:
  38                   - "newVersion=${{release_version}}"
  39                 settings: "{mvn-settings}"
  40                 settings-type: cfp
  41                 global-settings: "global-settings"
  42                 global-settings-type: cfp
  43
  44 - builder:
  45     name: lf-maven-stage
  46     builders:
  47       - lf-provide-maven-settings:
  48           global-settings-file: "{mvn-global-settings}"
  49           settings-file: "{mvn-settings}"
  50       - lf-infra-create-netrc:
  51           server-id: "{mvn-staging-id}"
  52       # include-raw-escape fails due to JJB bug
  53       - shell: !include-raw-escape:
  54           - ../shell/common-variables.sh
  55           - ../shell/maven-stage.sh
  56       - lf-provide-maven-settings-cleanup
  57
  58 - builder:
  59     name: lf-update-java-alternatives
  60     builders:
  61       - inject:
  62           # Work around inject plugin overriding our GIT_URL variable incorrectly
  63           # https://issues.jenkins-ci.org/browse/JENKINS-49775
  64           properties-content: |
  65             SET_JDK_VERSION={java-version}
  66             GIT_URL="$GIT_URL"
  67       - shell: !include-raw-escape: ../shell/update-java-alternatives.sh
  68       - inject:
  69           properties-file: "/tmp/java.env"
  70
  71 ####################
  72 # COMMON FUNCTIONS #
  73 ####################
  74
  75 - lf_maven_common: &lf_maven_common
  76     name: lf-maven-common
  77
  78     ######################
  79     # Default parameters #
  80     ######################
  81
  82     archive-artifacts: >
  83       **/*.log
  84       **/hs_err_*.log
  85       **/target/**/feature.xml
  86       **/target/failsafe-reports/failsafe-summary.xml
  87       **/target/surefire-reports/*-output.txt
  88
  89     #####################
  90     # Job Configuration #
  91     #####################
  92
  93     project-type: freestyle
  94     node: "{build-node}"
  95
  96     properties:
  97       - lf-infra-properties:
  98           build-days-to-keep: "{build-days-to-keep}"
  99
 100     parameters:
 101       - lf-infra-parameters:
 102           project: "{project}"
 103           branch: "{branch}"
 104           stream: "{stream}"
 105       - lf-infra-maven-parameters:
 106           mvn-opts: "{mvn-opts}"
 107           mvn-params: "{mvn-params}"
 108           mvn-version: "{mvn-version}"
 109       - string:
 110           name: ARCHIVE_ARTIFACTS
 111           default: "{archive-artifacts}"
 112           description: Artifacts to archive to the logs server.
 113
 114     wrappers:
 115       - lf-infra-wrappers:
 116           build-timeout: "{build-timeout}"
 117           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 118
 119     publishers:
 120       # TODO: Make email notification work.
 121       # - lf-infra-email-notify:
 122       #     email-recipients: '{email-recipients}'
 123       #     email-prefix: '[releng]'
 124       - lf-infra-publish
 125
 126 #############
 127 # Maven CLM #
 128 #############
 129
 130 - lf_maven_clm: &lf_maven_clm
 131     name: lf-maven-clm
 132
 133     ######################
 134     # Default parameters #
 135     ######################
 136
 137     branch: master
 138     build-days-to-keep: 30 # 30 days for troubleshooting purposes
 139     build-timeout: 60
 140     disable-job: false
 141     git-url: "$GIT_URL/$PROJECT"
 142     github-url: "https://github.com"
 143     java-version: openjdk11
 144     mvn-global-settings: global-settings
 145     mvn-goals: clean install
 146     mvn-opts: ""
 147     mvn-params: ""
 148     mvn-version: mvn35
 149     nexus-iq-namespace: "" # Recommend a trailing dash when set. Example: odl-
 150     nexus-iq-stage: "build"
 151     stream: master
 152     submodule-recursive: true
 153     submodule-timeout: 10
 154     submodule-disable: false
 155
 156     nexus_iq_scan_patterns:
 157       - "**/*.ear"
 158       - "**/*.jar"
 159       - "**/*.tar.gz"
 160       - "**/*.war"
 161       - "**/*.zip"
 162
 163     gerrit_clm_triggers:
 164       - comment-added-contains-event:
 165           comment-contains-value: '^Patch Set\s+\d+:\s+run-clm\s*$'
 166
 167     parameters:
 168       - lf-infra-parameters:
 169           project: "{project}"
 170           branch: "{branch}"
 171           stream: "{stream}"
 172       - lf-infra-maven-parameters:
 173           mvn-opts: "{mvn-opts}"
 174           mvn-params: "{mvn-params}"
 175           mvn-version: "{mvn-version}"
 176       - string:
 177           name: ARCHIVE_ARTIFACTS
 178           default: "{archive-artifacts}"
 179           description: Artifacts to archive to the logs server.
 180       - lf-clm-parameters:
 181           nexus-iq-stage: "{nexus-iq-stage}"
 182
 183     #####################
 184     # Job Configuration #
 185     #####################
 186
 187     disabled: "{disable-job}"
 188
 189     builders:
 190       - lf-infra-pre-build
 191       - lf-maven-install:
 192           mvn-version: "{mvn-version}"
 193       - lf-update-java-alternatives:
 194           java-version: "{java-version}"
 195       - lf-provide-maven-settings:
 196           global-settings-file: "{mvn-global-settings}"
 197           settings-file: "{mvn-settings}"
 198       - lf-infra-sonatype-clm:
 199           mvn-goals: "{mvn-goals}"
 200       - lf-provide-maven-settings-cleanup
 201       - shell: 'find . -regex ".*karaf/target" | xargs rm -rf'
 202       - nexus-iq-policy-evaluator:
 203           stage: "{nexus-iq-stage}"
 204           application-type: "manual"
 205           application-id: "{nexus-iq-namespace}{project-name}"
 206           scan-patterns: "{obj:nexus_iq_scan_patterns}"
 207           fail-build-network-error: true
 208
 209 - builder:
 210     name: lf-infra-sonatype-clm
 211     # Run a CLM scan build with Maven
 212     builders:
 213       - inject:
 214           properties-content: |
 215             MAVEN_GOALS={mvn-goals}
 216       - shell: !include-raw-escape:
 217           - ../shell/common-variables.sh
 218           - ../shell/sonatype-clm.sh
 219
 220 - job-template:
 221     name: "{project-name}-maven-clm-{stream}"
 222     id: gerrit-maven-clm
 223     <<: *lf_maven_common
 224     # yamllint disable-line rule:key-duplicates
 225     <<: *lf_maven_clm
 226
 227     scm:
 228       - lf-infra-gerrit-scm:
 229           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 230           git-url: "{git-url}"
 231           refspec: "$GERRIT_REFSPEC"
 232           branch: "$GERRIT_BRANCH"
 233           submodule-recursive: "{submodule-recursive}"
 234           submodule-timeout: "{submodule-timeout}"
 235           submodule-disable: "{submodule-disable}"
 236           choosing-strategy: default
 237
 238     triggers:
 239       # Build weekly on Saturdays
 240       - timed: "H H * * 6"
 241       - gerrit:
 242           server-name: "{gerrit-server-name}"
 243           trigger-on: "{obj:gerrit_clm_triggers}"
 244           projects:
 245             - project-compare-type: ANT
 246               project-pattern: "{project}"
 247               branches:
 248                 - branch-compare-type: ANT
 249                   branch-pattern: "**/{branch}"
 250           skip-vote:
 251             successful: true
 252             failed: true
 253             unstable: true
 254             notbuilt: true
 255
 256 - job-template:
 257     name: "{project-name}-maven-clm-{stream}"
 258     id: github-maven-clm
 259     <<: *lf_maven_common
 260     # yamllint disable-line rule:key-duplicates
 261     <<: *lf_maven_clm
 262
 263     properties:
 264       - lf-infra-properties:
 265           build-days-to-keep: "{build-days-to-keep}"
 266       - github:
 267           url: "{github-url}/{github-org}/{project}"
 268
 269     scm:
 270       - lf-infra-github-scm:
 271           url: "{git-clone-url}{github-org}/{project}"
 272           refspec: ""
 273           branch: "refs/heads/{branch}"
 274           submodule-recursive: "{submodule-recursive}"
 275           submodule-timeout: "{submodule-timeout}"
 276           submodule-disable: "{submodule-disable}"
 277           choosing-strategy: default
 278           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 279
 280     triggers:
 281       # Build weekly on Saturdays
 282       - timed: "H H * * 6"
 283       - github-pull-request:
 284           trigger-phrase: "^run-clm$"
 285           only-trigger-phrase: true
 286           status-context: "CLM"
 287           permit-all: true
 288           github-hooks: true
 289           org-list:
 290             - "{github-org}"
 291           white-list: "{obj:github_pr_allowlist}"
 292           admin-list: "{obj:github_pr_admin_list}"
 293           white-list-target-branches:
 294             - "{branch}"
 295
 296 #########################
 297 # Maven Javadoc Publish #
 298 #########################
 299
 300 - lf_maven_javadoc_publish: &lf_maven_javadoc_publish
 301     name: lf-maven-javadoc-publish
 302
 303     ######################
 304     # Default parameters #
 305     ######################
 306
 307     branch: master
 308     build-days-to-keep: 30 # 30 days in case a release takes long to get approved.
 309     build-timeout: 60
 310     disable-job: false
 311     git-url: "$GIT_URL/$PROJECT"
 312     github-url: "https://github.com"
 313     java-version: openjdk11
 314     mvn-dir: "."
 315     mvn-global-settings: global-settings
 316     mvn-opts: ""
 317     mvn-params: ""
 318     mvn-version: mvn35
 319     stream: master
 320     submodule-recursive: true
 321     submodule-timeout: 10
 322     submodule-disable: false
 323
 324     gerrit_merge_triggers:
 325       - change-merged-event
 326       - comment-added-contains-event:
 327           comment-contains-value: '^Patch Set\s+\d+:\s+remerge\s*$'
 328
 329     #####################
 330     # Job Configuration #
 331     #####################
 332
 333     disabled: "{disable-job}"
 334
 335     builders:
 336       - lf-infra-pre-build
 337       - lf-maven-install:
 338           mvn-version: "{mvn-version}"
 339       - lf-update-java-alternatives:
 340           java-version: "{java-version}"
 341       - lf-provide-maven-settings:
 342           global-settings-file: "{mvn-global-settings}"
 343           settings-file: "{mvn-settings}"
 344       - lf-infra-create-netrc:
 345           server-id: "{mvn-site-id}"
 346       - inject:
 347           properties-content: |
 348             DEPLOY_PATH={javadoc-path}
 349             MAVEN_DIR={mvn-dir}
 350       - shell: !include-raw-escape:
 351           - ../shell/common-variables.sh
 352           - ../shell/maven-javadoc-generate.sh
 353           - ../shell/maven-javadoc-publish.sh
 354       - lf-provide-maven-settings-cleanup
 355
 356 - job-template:
 357     name: "{project-name}-maven-javadoc-publish-{stream}-{java-version}"
 358     id: gerrit-maven-javadoc-publish
 359     <<: *lf_maven_common
 360     # yamllint disable-line rule:key-duplicates
 361     <<: *lf_maven_javadoc_publish
 362
 363     git-url: "$GIT_URL/$GERRIT_PROJECT"
 364
 365     scm:
 366       - lf-infra-gerrit-scm:
 367           git-url: "{git-url}"
 368           refspec: ""
 369           branch: "{branch}"
 370           submodule-recursive: "{submodule-recursive}"
 371           submodule-timeout: "{submodule-timeout}"
 372           submodule-disable: "{submodule-disable}"
 373           choosing-strategy: default
 374           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 375
 376     triggers:
 377       - gerrit:
 378           server-name: "{gerrit-server-name}"
 379           trigger-on: "{obj:gerrit_merge_triggers}"
 380           projects:
 381             - project-compare-type: ANT
 382               project-pattern: "{project}"
 383               branches:
 384                 - branch-compare-type: ANT
 385                   branch-pattern: "**/{branch}"
 386
 387 - job-template:
 388     name: "{project-name}-maven-javadoc-publish-{stream}-{java-version}"
 389     id: github-maven-javadoc-publish
 390     <<: *lf_maven_common
 391     # yamllint disable-line rule:key-duplicates
 392     <<: *lf_maven_javadoc_publish
 393
 394     properties:
 395       - lf-infra-properties:
 396           build-days-to-keep: "{build-days-to-keep}"
 397       - github:
 398           url: "{github-url}/{github-org}/{project}"
 399
 400     scm:
 401       - lf-infra-github-scm:
 402           url: "{git-clone-url}{github-org}/{project}"
 403           refspec: ""
 404           branch: "{branch}"
 405           submodule-recursive: "{submodule-recursive}"
 406           submodule-timeout: "{submodule-timeout}"
 407           submodule-disable: "{submodule-disable}"
 408           choosing-strategy: default
 409           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 410
 411     triggers:
 412       - github
 413       - pollscm:
 414           cron: ""
 415       - github-pull-request:
 416           trigger-phrase: "^remerge$"
 417           only-trigger-phrase: true
 418           status-context: "Maven Javadoc Publish"
 419           permit-all: true
 420           github-hooks: true
 421           org-list:
 422             - "{github-org}"
 423           white-list: "{obj:github_pr_allowlist}"
 424           admin-list: "{obj:github_pr_admin_list}"
 425           white-list-target-branches:
 426             - "{branch}"
 427
 428 ########################
 429 # Maven Javadoc Verify #
 430 ########################
 431
 432 - lf_maven_javadoc_verify: &lf_maven_javadoc_verify
 433     name: lf-maven-javadoc-verify
 434
 435     ######################
 436     # Default parameters #
 437     ######################
 438
 439     branch: master
 440     build-days-to-keep: 30 # 30 days in case a release takes long to get approved.
 441     build-timeout: 60
 442     disable-job: false
 443     git-url: "$GIT_URL/$PROJECT"
 444     github-url: "https://github.com"
 445     java-version: openjdk11
 446     mvn-dir: "."
 447     mvn-global-settings: global-settings
 448     mvn-opts: ""
 449     mvn-params: ""
 450     mvn-version: mvn35
 451     stream: master
 452     submodule-recursive: true
 453     submodule-timeout: 10
 454     submodule-disable: false
 455
 456     gerrit_verify_triggers:
 457       - patchset-created-event:
 458           exclude-drafts: true
 459           exclude-trivial-rebase: false
 460           exclude-no-code-change: false
 461       - draft-published-event
 462       - comment-added-contains-event:
 463           comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$'
 464
 465     #####################
 466     # Job Configuration #
 467     #####################
 468
 469     concurrent: true
 470     disabled: "{disable-job}"
 471
 472     builders:
 473       - lf-infra-pre-build
 474       - lf-maven-install:
 475           mvn-version: "{mvn-version}"
 476       - lf-update-java-alternatives:
 477           java-version: "{java-version}"
 478       - lf-provide-maven-settings:
 479           global-settings-file: "{mvn-global-settings}"
 480           settings-file: "{mvn-settings}"
 481       - inject:
 482           properties-content: |
 483             MAVEN_DIR={mvn-dir}
 484       - shell: !include-raw-escape:
 485           - ../shell/common-variables.sh
 486           - ../shell/maven-javadoc-generate.sh
 487       - lf-provide-maven-settings-cleanup
 488
 489 - job-template:
 490     name: "{project-name}-maven-javadoc-verify-{stream}-{java-version}"
 491     id: gerrit-maven-javadoc-verify
 492     <<: *lf_maven_common
 493     # yamllint disable-line rule:key-duplicates
 494     <<: *lf_maven_javadoc_verify
 495
 496     scm:
 497       - lf-infra-gerrit-scm:
 498           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 499           git-url: "{git-url}"
 500           refspec: "$GERRIT_REFSPEC"
 501           branch: "$GERRIT_BRANCH"
 502           submodule-recursive: "{submodule-recursive}"
 503           submodule-timeout: "{submodule-timeout}"
 504           submodule-disable: "{submodule-disable}"
 505           choosing-strategy: gerrit
 506
 507     triggers:
 508       - gerrit:
 509           server-name: "{gerrit-server-name}"
 510           trigger-on: "{obj:gerrit_verify_triggers}"
 511           projects:
 512             - project-compare-type: ANT
 513               project-pattern: "{project}"
 514               branches:
 515                 - branch-compare-type: ANT
 516                   branch-pattern: "**/{branch}"
 517
 518 - job-template:
 519     name: "{project-name}-maven-javadoc-verify-{stream}-{java-version}"
 520     id: github-maven-javadoc-verify
 521     <<: *lf_maven_common
 522     # yamllint disable-line rule:key-duplicates
 523     <<: *lf_maven_javadoc_verify
 524
 525     properties:
 526       - lf-infra-properties:
 527           build-days-to-keep: "{build-days-to-keep}"
 528       - github:
 529           url: "{github-url}/{github-org}/{project}"
 530
 531     scm:
 532       - lf-infra-github-scm:
 533           url: "{git-clone-url}{github-org}/{project}"
 534           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
 535           branch: "$sha1"
 536           submodule-recursive: "{submodule-recursive}"
 537           submodule-timeout: "{submodule-timeout}"
 538           submodule-disable: "{submodule-disable}"
 539           choosing-strategy: default
 540           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 541
 542     triggers:
 543       - github-pull-request:
 544           trigger-phrase: ^(recheck|reverify)$
 545           only-trigger-phrase: false
 546           status-context: "Maven Javadoc Verify"
 547           permit-all: true
 548           github-hooks: true
 549           white-list-target-branches:
 550             - "{branch}"
 551
 552 ###############
 553 # Maven Merge #
 554 ###############
 555
 556 - lf_maven_merge: &lf_maven_merge
 557     name: lf-maven-merge
 558
 559     ######################
 560     # Default parameters #
 561     ######################
 562
 563     branch: master
 564     build-days-to-keep: 30 # 30 days in case we need to troubleshoot
 565     build-timeout: 60
 566     cron: "@daily"
 567     disable-job: false
 568     git-url: "$GIT_URL/$PROJECT"
 569     github-url: "https://github.com"
 570     java-version: openjdk11
 571     mvn-global-settings: global-settings
 572     mvn-goals: clean deploy
 573     mvn-opts: ""
 574     mvn-params: "-Dmerge"
 575     mvn-version: mvn35
 576     nexus-cut-dirs: 6 # Number of dirs in the Nexus path to remove for wget -r.
 577     stream: master
 578     submodule-recursive: true
 579     submodule-timeout: 10
 580     submodule-disable: false
 581
 582     gerrit_merge_triggers:
 583       - change-merged-event
 584       - comment-added-contains-event:
 585           comment-contains-value: '^Patch Set\s+\d+:\s+remerge\s*$'
 586
 587     gerrit_trigger_file_paths:
 588       - compare-type: REG_EXP
 589         pattern: ".*"
 590
 591     # github_included_regions MUST match gerrit_trigger_file_paths
 592     github_included_regions:
 593       - ".*"
 594
 595     post_build_trigger: ""
 596
 597     #####################
 598     # Job Configuration #
 599     #####################
 600
 601     disabled: "{disable-job}"
 602
 603     builders:
 604       - lf-infra-pre-build
 605       - lf-jacoco-nojava-workaround
 606       - lf-maven-install:
 607           mvn-version: "{mvn-version}"
 608       - lf-update-java-alternatives:
 609           java-version: "{java-version}"
 610       - lf-provide-maven-settings:
 611           global-settings-file: "{mvn-global-settings}"
 612           settings-file: "{mvn-settings}"
 613       - lf-infra-create-netrc:
 614           server-id: "{mvn-snapshot-id}"
 615       - inject:
 616           properties-content: |
 617             NEXUS_CUT_DIRS={nexus-cut-dirs}
 618             NEXUS_REPO={nexus-snapshot-repo}
 619       - shell: !include-raw-escape: ../shell/maven-fetch-metadata.sh
 620       - lf-maven-build:
 621           mvn-goals: "{mvn-goals}"
 622       - lf-maven-deploy
 623       - lf-provide-maven-settings-cleanup
 624
 625     publishers:
 626       - findbugs
 627       - lf-jacoco-report
 628       - lf-infra-publish
 629       - trigger-parameterized-builds: "{obj:post_build_trigger}"
 630
 631 - job-template:
 632     name: "{project-name}-maven-merge-{stream}"
 633     id: gerrit-maven-merge
 634     <<: *lf_maven_common
 635     # yamllint disable-line rule:key-duplicates
 636     <<: *lf_maven_merge
 637
 638     scm:
 639       - lf-infra-gerrit-scm:
 640           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 641           git-url: "{git-url}"
 642           refspec: "$GERRIT_REFSPEC"
 643           branch: "$GERRIT_BRANCH"
 644           submodule-recursive: "{submodule-recursive}"
 645           submodule-timeout: "{submodule-timeout}"
 646           submodule-disable: "{submodule-disable}"
 647           choosing-strategy: default
 648
 649     triggers:
 650       - timed: "{obj:cron}"
 651       - gerrit:
 652           server-name: "{gerrit-server-name}"
 653           trigger-on: "{obj:gerrit_merge_triggers}"
 654           projects:
 655             - project-compare-type: ANT
 656               project-pattern: "{project}"
 657               branches:
 658                 - branch-compare-type: ANT
 659                   branch-pattern: "**/{branch}"
 660               file-paths: "{obj:gerrit_trigger_file_paths}"
 661
 662 - job-template:
 663     name: "{project-name}-maven-merge-{stream}"
 664     id: github-maven-merge
 665     <<: *lf_maven_common
 666     # yamllint disable-line rule:key-duplicates
 667     <<: *lf_maven_merge
 668
 669     properties:
 670       - lf-infra-properties:
 671           build-days-to-keep: "{build-days-to-keep}"
 672       - github:
 673           url: "{github-url}/{github-org}/{project}"
 674
 675     scm:
 676       - lf-infra-github-scm:
 677           url: "{git-clone-url}{github-org}/{project}"
 678           refspec: ""
 679           branch: "refs/heads/{branch}"
 680           submodule-recursive: "{submodule-recursive}"
 681           submodule-timeout: "{submodule-timeout}"
 682           submodule-disable: "{submodule-disable}"
 683           choosing-strategy: default
 684           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 685
 686     triggers:
 687       - timed: "{obj:cron}"
 688       - github
 689       - pollscm:
 690           cron: ""
 691       - github-pull-request:
 692           trigger-phrase: "^remerge$"
 693           only-trigger-phrase: true
 694           status-context: "Maven Merge"
 695           permit-all: true
 696           github-hooks: true
 697           org-list:
 698             - "{github-org}"
 699           white-list: "{obj:github_pr_allowlist}"
 700           admin-list: "{obj:github_pr_admin_list}"
 701           white-list-target-branches:
 702             - "{branch}"
 703           included-regions: "{obj:github_included_regions}"
 704
 705 ##########################
 706 # Maven Merge for Docker #
 707 ##########################
 708
 709 - lf_maven_docker_merge: &lf_maven_docker_merge
 710     name: lf-maven-docker-merge
 711
 712     builders:
 713       - lf-infra-pre-build
 714       - lf-jacoco-nojava-workaround
 715       - lf-maven-install:
 716           mvn-version: "{mvn-version}"
 717       - lf-infra-docker-login:
 718           global-settings-file: "{mvn-global-settings}"
 719           settings-file: "{mvn-settings}"
 720       - lf-update-java-alternatives:
 721           java-version: "{java-version}"
 722       # must provide maven settings AFTER docker due to its cleanup
 723       - lf-provide-maven-settings:
 724           global-settings-file: "{mvn-global-settings}"
 725           settings-file: "{mvn-settings}"
 726       - lf-infra-create-netrc:
 727           server-id: "{mvn-snapshot-id}"
 728       - inject:
 729           properties-content: |
 730             NEXUS_CUT_DIRS={nexus-cut-dirs}
 731             NEXUS_REPO={nexus-snapshot-repo}
 732             CONTAINER_PULL_REGISTRY={container-public-registry}
 733             CONTAINER_PUSH_REGISTRY={container-snapshot-registry}
 734       - shell: !include-raw-escape: ../shell/maven-fetch-metadata.sh
 735       - lf-maven-build:
 736           mvn-goals: "{mvn-goals}"
 737       # NO lf-maven-deploy
 738       - lf-provide-maven-settings-cleanup
 739
 740 - job-template:
 741     name: "{project-name}-maven-docker-merge-{stream}"
 742     id: gerrit-maven-docker-merge
 743     <<: *lf_maven_common
 744     # yamllint disable-line rule:key-duplicates
 745     <<: *lf_maven_merge
 746     # yamllint disable-line rule:key-duplicates
 747     <<: *lf_maven_docker_merge
 748
 749     scm:
 750       - lf-infra-gerrit-scm:
 751           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 752           git-url: "{git-url}"
 753           refspec: "$GERRIT_REFSPEC"
 754           branch: "$GERRIT_BRANCH"
 755           submodule-recursive: "{submodule-recursive}"
 756           submodule-timeout: "{submodule-timeout}"
 757           submodule-disable: "{submodule-disable}"
 758           choosing-strategy: default
 759
 760     triggers:
 761       - gerrit:
 762           server-name: "{gerrit-server-name}"
 763           trigger-on: "{obj:gerrit_merge_triggers}"
 764           projects:
 765             - project-compare-type: ANT
 766               project-pattern: "{project}"
 767               branches:
 768                 - branch-compare-type: ANT
 769                   branch-pattern: "**/{branch}"
 770               file-paths: "{obj:gerrit_trigger_file_paths}"
 771
 772 - job-template:
 773     name: "{project-name}-maven-docker-merge-{stream}"
 774     id: github-maven-docker-merge
 775     <<: *lf_maven_common
 776     # yamllint disable-line rule:key-duplicates
 777     <<: *lf_maven_merge
 778     # yamllint disable-line rule:key-duplicates
 779     <<: *lf_maven_docker_merge
 780
 781     properties:
 782       - lf-infra-properties:
 783           build-days-to-keep: "{build-days-to-keep}"
 784       - github:
 785           url: "{github-url}/{github-org}/{project}"
 786
 787     scm:
 788       - lf-infra-github-scm:
 789           url: "{git-clone-url}{github-org}/{project}"
 790           refspec: ""
 791           branch: "refs/heads/{branch}"
 792           submodule-recursive: "{submodule-recursive}"
 793           submodule-timeout: "{submodule-timeout}"
 794           submodule-disable: "{submodule-disable}"
 795           choosing-strategy: default
 796           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 797
 798     triggers:
 799       - github
 800       - pollscm:
 801           cron: ""
 802       - github-pull-request:
 803           trigger-phrase: "^remerge$"
 804           only-trigger-phrase: true
 805           status-context: "Maven Docker Merge"
 806           permit-all: true
 807           github-hooks: true
 808           org-list:
 809             - "{github-org}"
 810           white-list: "{obj:github_pr_allowlist}"
 811           admin-list: "{obj:github_pr_admin_list}"
 812           white-list-target-branches:
 813             - "{branch}"
 814           included-regions: "{obj:github_included_regions}"
 815
 816 ###############
 817 # Maven Stage #
 818 ###############
 819
 820 - lf_maven_stage: &lf_maven_stage
 821     name: lf-maven-stage
 822
 823     ######################
 824     # Default parameters #
 825     ######################
 826
 827     branch: master
 828     build-days-to-keep: 30 # 30 days in case a release takes long to get approved.
 829     build-timeout: 60
 830     cron: "@daily"
 831     disable-job: false
 832     git-url: "$GIT_URL/$PROJECT"
 833     github-url: "https://github.com"
 834     java-version: openjdk11
 835     maven-versions-plugin: false
 836     version-properties-file: version.properties
 837     mvn-central: false
 838     mvn-global-settings: global-settings
 839     mvn-goals: clean deploy
 840     mvn-opts: ""
 841     mvn-params: ""
 842     mvn-version: mvn35
 843     ossrh-profile-id: ""
 844     mvn-pom: ""
 845     sbom-flags: ""
 846     sbom-generator: false
 847     sbom-generator-version: "v0.0.10"
 848     sign-artifacts: false
 849     sign-mode: serial
 850     stream: master
 851     submodule-recursive: true
 852     submodule-timeout: 10
 853     submodule-disable: false
 854
 855     gerrit_release_triggers:
 856       - comment-added-contains-event:
 857           comment-contains-value: '^Patch Set\s+\d+:\s+stage-(maven-)?release\s*$'
 858
 859     gerrit_trigger_file_paths:
 860       - compare-type: ANT
 861         pattern: "**"
 862
 863     # github_included_regions MUST match gerrit_trigger_file_paths
 864     github_included_regions:
 865       - ".*"
 866
 867     #####################
 868     # Job Configuration #
 869     #####################
 870
 871     disabled: "{disable-job}"
 872
 873     parameters:
 874       - lf-infra-parameters:
 875           project: "{project}"
 876           branch: "{branch}"
 877           stream: "{stream}"
 878       - lf-infra-maven-parameters:
 879           mvn-opts: "{mvn-opts}"
 880           mvn-params: "{mvn-params}"
 881           mvn-version: "{mvn-version}"
 882           staging-profile-id: "{staging-profile-id}"
 883       - bool:
 884           name: MAVEN_VERSIONS_PLUGIN
 885           default: "{maven-versions-plugin}"
 886           description: Use maven-versions-plugin to update pom versions.
 887       - string:
 888           name: ARCHIVE_ARTIFACTS
 889           default: "{archive-artifacts}"
 890           description: Artifacts to archive to the logs server.
 891       - string:
 892           name: STAGING_PROFILE_ID
 893           default: "{staging-profile-id}"
 894           description: Nexus staging profile ID.
 895       - string:
 896           name: SBOM_GENERATOR_VERSION
 897           default: "{sbom-generator-version}"
 898           description: SBOM generator version to download and run.
 899
 900     builders:
 901       - lf-infra-pre-build
 902       - lf-jacoco-nojava-workaround
 903       - lf-maven-install:
 904           mvn-version: "{mvn-version}"
 905       - lf-update-java-alternatives:
 906           java-version: "{java-version}"
 907       - lf-provide-maven-settings:
 908           global-settings-file: "{mvn-global-settings}"
 909           settings-file: "{mvn-settings}"
 910       - lf-maven-versions-plugin:
 911           maven-versions-plugin: "{maven-versions-plugin}"
 912           version-properties-file: "{version-properties-file}"
 913           mvn-version: "{mvn-version}"
 914           mvn-pom: "{mvn-pom}"
 915           mvn-settings: "{mvn-settings}"
 916       - shell: !include-raw-escape: ../shell/maven-patch-release.sh
 917       - lf-maven-build:
 918           mvn-goals: "{mvn-goals}"
 919       # With SBOM Generator
 920       - conditional-step:
 921           condition-kind: boolean-expression
 922           condition-expression: "{sbom-generator}"
 923           steps:
 924             - shell: echo 'Running SBOM Generator'
 925             - lf-infra-maven-sbom-generator:
 926                 sbom-flags: "{sbom-flags}"
 927       - lf-sigul-sign-dir:
 928           sign-artifacts: "{sign-artifacts}"
 929           sign-dir: "$WORKSPACE/m2repo"
 930           sign-mode: "{sign-mode}"
 931       - lf-maven-stage:
 932           mvn-global-settings: "{mvn-global-settings}"
 933           mvn-settings: "{mvn-settings}"
 934           mvn-staging-id: "{mvn-staging-id}"
 935       - lf-maven-central:
 936           mvn-central: "{mvn-central}"
 937           mvn-global-settings: "{mvn-global-settings}"
 938           mvn-settings: "{mvn-settings}"
 939           ossrh-profile-id: "{ossrh-profile-id}"
 940       - lf-provide-maven-settings-cleanup
 941
 942 - job-template:
 943     name: "{project-name}-maven-stage-{stream}"
 944     id: gerrit-maven-stage
 945     <<: *lf_maven_common
 946     # yamllint disable-line rule:key-duplicates
 947     <<: *lf_maven_stage
 948
 949     scm:
 950       - lf-infra-gerrit-scm:
 951           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 952           git-url: "{git-url}"
 953           refspec: "$GERRIT_REFSPEC"
 954           branch: "$GERRIT_BRANCH"
 955           submodule-recursive: "{submodule-recursive}"
 956           submodule-timeout: "{submodule-timeout}"
 957           submodule-disable: "{submodule-disable}"
 958           choosing-strategy: default
 959
 960     triggers:
 961       - timed: "{obj:cron}"
 962       - gerrit:
 963           server-name: "{gerrit-server-name}"
 964           trigger-on: "{obj:gerrit_release_triggers}"
 965           projects:
 966             - project-compare-type: ANT
 967               project-pattern: "{project}"
 968               branches:
 969                 - branch-compare-type: ANT
 970                   branch-pattern: "**/{branch}"
 971               file-paths: "{obj:gerrit_trigger_file_paths}"
 972
 973 - job-template:
 974     name: "{project-name}-maven-stage-{stream}"
 975     id: github-maven-stage
 976     <<: *lf_maven_common
 977     # yamllint disable-line rule:key-duplicates
 978     <<: *lf_maven_stage
 979
 980     properties:
 981       - lf-infra-properties:
 982           build-days-to-keep: "{build-days-to-keep}"
 983       - github:
 984           url: "{github-url}/{github-org}/{project}"
 985
 986     scm:
 987       - lf-infra-github-scm:
 988           url: "{git-clone-url}{github-org}/{project}"
 989           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
 990           branch: "{branch}"
 991           submodule-recursive: "{submodule-recursive}"
 992           submodule-timeout: "{submodule-timeout}"
 993           submodule-disable: "{submodule-disable}"
 994           choosing-strategy: default
 995           jenkins-ssh-credential: "{jenkins-ssh-credential}"
 996
 997     triggers:
 998       - timed: "{obj:cron}"
 999       - github-pull-request:
1000           trigger-phrase: "^stage-(maven-)?release$"
1001           only-trigger-phrase: true
1002           status-context: "Maven Release"
1003           permit-all: true
1004           github-hooks: true
1005           white-list-target-branches:
1006             - "{branch}"
1007           included-regions: "{obj:github_included_regions}"
1008
1009 ##########################
1010 # Maven Stage for Docker #
1011 ##########################
1012
1013 - lf_maven_docker_stage: &lf_maven_docker_stage
1014     name: lf-maven-docker-stage
1015
1016     builders:
1017       - lf-infra-pre-build
1018       - lf-jacoco-nojava-workaround
1019       - lf-maven-install:
1020           mvn-version: "{mvn-version}"
1021       - lf-update-java-alternatives:
1022           java-version: "{java-version}"
1023       - lf-infra-docker-login:
1024           global-settings-file: "{mvn-global-settings}"
1025           settings-file: "{mvn-settings}"
1026       # must provide maven settings AFTER docker-login due to its cleanup
1027       - lf-provide-maven-settings:
1028           global-settings-file: "{mvn-global-settings}"
1029           settings-file: "{mvn-settings}"
1030       - lf-maven-versions-plugin:
1031           maven-versions-plugin: "{maven-versions-plugin}"
1032           version-properties-file: "{version-properties-file}"
1033           mvn-version: "{mvn-version}"
1034           mvn-pom: "{mvn-pom}"
1035           mvn-settings: "{mvn-settings}"
1036       - shell: !include-raw-escape: ../shell/maven-patch-release.sh
1037       - inject:
1038           properties-content: |
1039             CONTAINER_PULL_REGISTRY={container-public-registry}
1040             CONTAINER_PUSH_REGISTRY={container-staging-registry}
1041       - lf-maven-build:
1042           mvn-goals: "{mvn-goals}"
1043       - lf-sigul-sign-dir:
1044           sign-artifacts: "{sign-artifacts}"
1045           sign-dir: "$WORKSPACE/m2repo"
1046           sign-mode: "{sign-mode}"
1047       # NO lf-maven-stage
1048       # NO lf-maven-central
1049       - lf-provide-maven-settings-cleanup
1050
1051     gerrit_release_docker_triggers:
1052       - comment-added-contains-event:
1053           comment-contains-value: '^Patch Set\s+\d+:\s+stage-(docker-)?release\s*$'
1054
1055 - job-template:
1056     name: "{project-name}-maven-docker-stage-{stream}"
1057     id: gerrit-maven-docker-stage
1058     <<: *lf_maven_common
1059     # yamllint disable-line rule:key-duplicates
1060     <<: *lf_maven_stage
1061     # yamllint disable-line rule:key-duplicates
1062     <<: *lf_maven_docker_stage
1063
1064     scm:
1065       - lf-infra-gerrit-scm:
1066           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1067           git-url: "{git-url}"
1068           refspec: "$GERRIT_REFSPEC"
1069           branch: "$GERRIT_BRANCH"
1070           submodule-recursive: "{submodule-recursive}"
1071           submodule-timeout: "{submodule-timeout}"
1072           submodule-disable: "{submodule-disable}"
1073           choosing-strategy: default
1074
1075     triggers:
1076       - timed: "{obj:cron}"
1077       - gerrit:
1078           server-name: "{gerrit-server-name}"
1079           trigger-on: "{obj:gerrit_release_docker_triggers}"
1080           projects:
1081             - project-compare-type: ANT
1082               project-pattern: "{project}"
1083               branches:
1084                 - branch-compare-type: ANT
1085                   branch-pattern: "**/{branch}"
1086               file-paths: "{obj:gerrit_trigger_file_paths}"
1087
1088 - job-template:
1089     name: "{project-name}-maven-docker-stage-{stream}"
1090     id: github-maven-docker-stage
1091     <<: *lf_maven_common
1092     # yamllint disable-line rule:key-duplicates
1093     <<: *lf_maven_stage
1094     # yamllint disable-line rule:key-duplicates
1095     <<: *lf_maven_docker_stage
1096
1097     properties:
1098       - lf-infra-properties:
1099           build-days-to-keep: "{build-days-to-keep}"
1100       - github:
1101           url: "{github-url}/{github-org}/{project}"
1102
1103     scm:
1104       - lf-infra-github-scm:
1105           url: "{git-clone-url}{github-org}/{project}"
1106           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1107           branch: "{branch}"
1108           submodule-recursive: "{submodule-recursive}"
1109           submodule-timeout: "{submodule-timeout}"
1110           submodule-disable: "{submodule-disable}"
1111           choosing-strategy: default
1112           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1113
1114     triggers:
1115       - timed: "{obj:cron}"
1116       - github-pull-request:
1117           trigger-phrase: "^stage-(docker-)?release$"
1118           only-trigger-phrase: true
1119           status-context: "Maven Release"
1120           permit-all: true
1121           github-hooks: true
1122           white-list-target-branches:
1123             - "{branch}"
1124           included-regions: "{obj:github_included_regions}"
1125
1126 ###############
1127 # Maven Sonar #
1128 ###############
1129
1130 - lf_maven_sonar: &lf_maven_sonar
1131     name: lf-maven-sonar
1132
1133     ######################
1134     # Default parameters #
1135     ######################
1136
1137     branch: master # Sonar should always be run on master branch
1138     build-days-to-keep: 7
1139     build-timeout: 60
1140     cron: "H H * * 6" # run weekly
1141     disable-job: false
1142     git-url: "$GIT_URL/$PROJECT"
1143     github-url: "https://github.com"
1144     java-version: openjdk11
1145     java-opts: ""
1146     mvn-global-settings: global-settings
1147     mvn-goals: clean install
1148     mvn-opts: ""
1149     mvn-params: ""
1150     mvn-version: mvn35
1151     sonar-mvn-goal: "sonar:sonar"
1152     sonarcloud: false
1153     sonarcloud-project-key: ""
1154     sonarcloud-project-organization: ""
1155     sonarcloud-api-token: ""
1156     sonarcloud-qualitygate-wait: false
1157     # SonarCloud scan using jdk8 will become deprecated by Oct, 2020
1158     # Projects not compatible with jdk11 can set java-version to something else
1159     sonarcloud-java-version: openjdk11
1160     stream: master
1161     submodule-recursive: true
1162     submodule-timeout: 10
1163     submodule-disable: false
1164     scan-dev-branch: false
1165
1166     gerrit_sonar_triggers:
1167       - comment-added-contains-event:
1168           comment-contains-value: '^Patch Set\s+\d+:\s+run-sonar\s*$'
1169
1170     #####################
1171     # Job Configuration #
1172     #####################
1173
1174     disabled: "{disable-job}"
1175
1176     parameters:
1177       - lf-infra-parameters:
1178           project: "{project}"
1179           branch: "{branch}"
1180           stream: "{stream}"
1181       - lf-infra-maven-parameters:
1182           mvn-opts: "{mvn-opts}"
1183           mvn-params: "{mvn-params}"
1184           mvn-version: "{mvn-version}"
1185       - string:
1186           name: ARCHIVE_ARTIFACTS
1187           default: "{archive-artifacts}"
1188           description: Artifacts to archive to the logs server.
1189       - string:
1190           name: JAVA_OPTS
1191           default: "{java-opts}"
1192           description: |
1193             Java options. Example: -Xmx1024m
1194       - string:
1195           name: SONAR_MAVEN_GOAL
1196           default: "{sonar-mvn-goal}"
1197           description: |
1198             Maven goals to pass to the Sonar call. Typically sonar:sonar
1199             however to use a specific version of the sonar-maven-plugin we
1200             can call "org.codehaus.mojo:sonar-maven-plugin:3.3.0.603:sonar".
1201
1202     triggers:
1203       - timed: "{obj:cron}"
1204       - gerrit:
1205           server-name: "{gerrit-server-name}"
1206           trigger-on: "{obj:gerrit_sonar_triggers}"
1207           projects:
1208             - project-compare-type: "ANT"
1209               project-pattern: "{project}"
1210               branches:
1211                 - branch-compare-type: "ANT"
1212                   branch-pattern: "**/master"
1213           skip-vote:
1214             successful: true
1215             failed: true
1216             unstable: true
1217             notbuilt: true
1218
1219     publishers:
1220       - lf-jacoco-report
1221       - findbugs
1222       - lf-infra-publish
1223
1224 - mvn_sonar_builders: &mvn_sonar_builders
1225     name: mvn-sonar-builders
1226     builders:
1227       - lf-infra-pre-build
1228       # With SonarCloud
1229       - conditional-step:
1230           condition-kind: boolean-expression
1231           condition-expression: "{sonarcloud}"
1232           steps:
1233             - shell: echo 'Using SonarCloud'
1234             - lf-infra-maven-sonarcloud:
1235                 java-version: "{java-version}"
1236                 mvn-goals: "{mvn-goals}"
1237                 mvn-settings: "{mvn-settings}"
1238                 mvn-version: "{mvn-version}"
1239                 sonarcloud-project-key: "{sonarcloud-project-key}"
1240                 sonarcloud-project-organization: "{sonarcloud-project-organization}"
1241                 sonarcloud-api-token: "{sonarcloud-api-token}"
1242                 sonarcloud-java-version: "{sonarcloud-java-version}"
1243                 sonarcloud-qualitygate-wait: "{sonarcloud-qualitygate-wait}"
1244                 scan-dev-branch: "{scan-dev-branch}"
1245       # With SonarQube
1246       - conditional-step:
1247           condition-kind: not
1248           condition-operand:
1249             condition-kind: boolean-expression
1250             condition-expression: "{sonarcloud}"
1251           steps:
1252             - shell: echo 'Using SonarQube'
1253             - lf-infra-maven-sonar:
1254                 java-version: "{java-version}"
1255                 mvn-goals: "{mvn-goals}"
1256                 mvn-settings: "{mvn-settings}"
1257                 mvn-version: "{mvn-version}"
1258
1259 - mvn_sonar_builders_prescan_script: &mvn_sonar_builders_prescan_script
1260     name: mvn-sonar-builders-prescan-script
1261     builders:
1262       - shell: "{sonar-prescan-script}"
1263       - lf-infra-pre-build
1264       # With SonarCloud
1265       - conditional-step:
1266           condition-kind: boolean-expression
1267           condition-expression: "{sonarcloud}"
1268           steps:
1269             - shell: echo 'Using SonarCloud'
1270             - lf-infra-maven-sonarcloud:
1271                 java-version: "{java-version}"
1272                 mvn-goals: "{mvn-goals}"
1273                 mvn-settings: "{mvn-settings}"
1274                 mvn-version: "{mvn-version}"
1275                 sonarcloud-project-key: "{sonarcloud-project-key}"
1276                 sonarcloud-project-organization: "{sonarcloud-project-organization}"
1277                 sonarcloud-api-token: "{sonarcloud-api-token}"
1278                 sonarcloud-java-version: "{sonarcloud-java-version}"
1279                 sonarcloud-qualitygate-wait: "{sonarcloud-qualitygate-wait}"
1280                 scan-dev-branch: "{scan-dev-branch}"
1281       # With SonarQube
1282       - conditional-step:
1283           condition-kind: not
1284           condition-operand:
1285             condition-kind: boolean-expression
1286             condition-expression: "{sonarcloud}"
1287           steps:
1288             - shell: echo 'Using SonarQube'
1289             - lf-infra-maven-sonar:
1290                 java-version: "{java-version}"
1291                 mvn-goals: "{mvn-goals}"
1292                 mvn-settings: "{mvn-settings}"
1293                 mvn-version: "{mvn-version}"
1294
1295 - builder:
1296     name: lf-infra-maven-sbom-generator
1297     # Run Maven goals and trigger SPDX SBOM Generator tool
1298     builders:
1299       - inject:
1300           properties-content: |
1301             SBOM_FLAGS={sbom-flags}
1302       - shell: !include-raw-escape:
1303           - ../shell/sbom-generator.sh
1304
1305 - builder:
1306     name: lf-infra-maven-sonar
1307     # Run a Sonar build with Maven
1308     builders:
1309       - lf-maven-install:
1310           mvn-version: "{mvn-version}"
1311       - lf-update-java-alternatives:
1312           java-version: "{java-version}"
1313       - inject:
1314           # Switch this to the sonar wrapper when JJB 2.0 is available
1315           properties-content: |
1316             SONAR_HOST_URL=$SONAR_URL
1317             MAVEN_GOALS={mvn-goals}
1318       - lf-provide-maven-settings:
1319           global-settings-file: global-settings
1320           settings-file: "{mvn-settings}"
1321       - shell: !include-raw-escape:
1322           - ../shell/common-variables.sh
1323           - ../shell/maven-sonar.sh
1324       - lf-provide-maven-settings-cleanup
1325
1326 - builder:
1327     name: lf-infra-maven-sonarcloud
1328     # Run a Sonar build with Maven
1329     builders:
1330       - lf-maven-install:
1331           mvn-version: "{mvn-version}"
1332       - lf-update-java-alternatives:
1333           java-version: "{java-version}"
1334       - inject:
1335           # Switch this to the sonar wrapper when JJB 2.0 is available
1336           properties-content: |
1337             SONAR_HOST_URL=https://sonarcloud.io
1338             PROJECT_KEY={sonarcloud-project-key}
1339             PROJECT_ORGANIZATION={sonarcloud-project-organization}
1340             MAVEN_GOALS={mvn-goals}
1341             API_TOKEN={sonarcloud-api-token}
1342             SONARCLOUD_JAVA_VERSION={sonarcloud-java-version}
1343             SCAN_DEV_BRANCH={scan-dev-branch}
1344             SONARCLOUD_QUALITYGATE_WAIT={sonarcloud-qualitygate-wait}
1345       - lf-provide-maven-settings:
1346           global-settings-file: global-settings
1347           settings-file: "{mvn-settings}"
1348       - shell: !include-raw-escape:
1349           - ../shell/common-variables.sh
1350           - ../shell/maven-sonar.sh
1351       - lf-provide-maven-settings-cleanup
1352
1353 - job-template:
1354     name: "{project-name}-sonar"
1355     id: gerrit-maven-sonar
1356     <<: *lf_maven_common
1357     # yamllint disable-line rule:key-duplicates
1358     <<: *lf_maven_sonar
1359     <<: *mvn_sonar_builders
1360
1361     scm:
1362       - lf-infra-gerrit-scm:
1363           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1364           git-url: "{git-url}"
1365           refspec: $GERRIT_REFSPEC
1366           branch: $GERRIT_BRANCH
1367           submodule-recursive: "{submodule-recursive}"
1368           submodule-timeout: "{submodule-timeout}"
1369           submodule-disable: "{submodule-disable}"
1370           choosing-strategy: default
1371
1372 - job-template:
1373     name: "{project-name}-sonar-verify"
1374     id: gerrit-maven-sonar-verify
1375     <<: *lf_maven_common
1376     # yamllint disable-line rule:key-duplicates
1377     <<: *lf_maven_sonar
1378     <<: *mvn_sonar_builders
1379
1380     sonarcloud: true
1381     scan-dev-branch: true
1382     sonarcloud-qualitygate-wait: false
1383
1384     gerrit_sonar_triggers:
1385       - patchset-created-event:
1386           exclude-drafts: true
1387           exclude-trivial-rebase: false
1388           exclude-no-code-change: false
1389       - draft-published-event
1390       - comment-added-contains-event:
1391           comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$'
1392
1393     gerrit_trigger_file_paths:
1394       - compare-type: REG_EXP
1395         pattern: ".*"
1396
1397     triggers:
1398       - gerrit:
1399           server-name: "{gerrit-server-name}"
1400           trigger-on: "{obj:gerrit_sonar_triggers}"
1401           projects:
1402             - project-compare-type: "ANT"
1403               project-pattern: "{project}"
1404               branches:
1405                 - branch-compare-type: "ANT"
1406                   branch-pattern: "**/{branch}"
1407               file-paths: "{obj:gerrit_trigger_file_paths}"
1408
1409     scm:
1410       - lf-infra-gerrit-scm:
1411           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1412           git-url: "{git-url}"
1413           refspec: $GERRIT_REFSPEC
1414           branch: $GERRIT_BRANCH
1415           submodule-recursive: "{submodule-recursive}"
1416           submodule-timeout: "{submodule-timeout}"
1417           submodule-disable: "{submodule-disable}"
1418           choosing-strategy: gerrit
1419
1420 - job-template:
1421     name: "{project-name}-sonar-prescan-script"
1422     id: gerrit-maven-sonar-prescan-script
1423     <<: *lf_maven_common
1424     # yamllint disable-line rule:key-duplicates
1425     <<: *lf_maven_sonar
1426     <<: *mvn_sonar_builders_prescan_script
1427
1428     scm:
1429       - lf-infra-gerrit-scm:
1430           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1431           git-url: "{git-url}"
1432           refspec: $GERRIT_REFSPEC
1433           branch: $GERRIT_BRANCH
1434           submodule-recursive: "{submodule-recursive}"
1435           submodule-timeout: "{submodule-timeout}"
1436           submodule-disable: "{submodule-disable}"
1437           choosing-strategy: default
1438
1439 - job-template:
1440     name: "{project-name}-sonar"
1441     id: github-maven-sonar
1442     <<: *lf_maven_common
1443     # yamllint disable-line rule:key-duplicates
1444     <<: *lf_maven_sonar
1445
1446     properties:
1447       - lf-infra-properties:
1448           build-days-to-keep: "{build-days-to-keep}"
1449       - github:
1450           url: "{github-url}/{github-org}/{project}"
1451
1452     scm:
1453       - lf-infra-github-scm:
1454           url: "{git-clone-url}{github-org}/{project}"
1455           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1456           branch: "$sha1"
1457           submodule-recursive: "{submodule-recursive}"
1458           submodule-timeout: "{submodule-timeout}"
1459           submodule-disable: "{submodule-disable}"
1460           choosing-strategy: default
1461           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1462
1463     triggers:
1464       - timed: "{obj:cron}"
1465       - github-pull-request:
1466           trigger-phrase: "^run-sonar$"
1467           only-trigger-phrase: true
1468           status-context: "Maven Sonar"
1469           permit-all: true
1470           github-hooks: true
1471           org-list:
1472             - "{github-org}"
1473           white-list: "{obj:github_pr_allowlist}"
1474           admin-list: "{obj:github_pr_admin_list}"
1475           white-list-target-branches:
1476             - "{branch}"
1477
1478 - job-template:
1479     name: "{project-name}-sonar-prescan-script"
1480     id: github-maven-sonar-prescan-script
1481     <<: *lf_maven_common
1482     # yamllint disable-line rule:key-duplicates
1483     <<: *lf_maven_sonar
1484     <<: *mvn_sonar_builders_prescan_script
1485
1486     properties:
1487       - lf-infra-properties:
1488           build-days-to-keep: "{build-days-to-keep}"
1489       - github:
1490           url: "{github-url}/{github-org}/{project}"
1491
1492     scm:
1493       - lf-infra-github-scm:
1494           url: "{git-clone-url}{github-org}/{project}"
1495           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1496           branch: "$sha1"
1497           submodule-recursive: "{submodule-recursive}"
1498           submodule-timeout: "{submodule-timeout}"
1499           submodule-disable: "{submodule-disable}"
1500           choosing-strategy: default
1501           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1502
1503     triggers:
1504       - timed: "{obj:cron}"
1505       - github-pull-request:
1506           trigger-phrase: "^run-sonar$"
1507           only-trigger-phrase: true
1508           status-context: "Maven Sonar"
1509           permit-all: true
1510           github-hooks: true
1511           org-list:
1512             - "{github-org}"
1513           white-list: "{obj:github_pr_allowlist}"
1514           admin-list: "{obj:github_pr_admin_list}"
1515           white-list-target-branches:
1516             - "{branch}"
1517
1518 ################
1519 # Maven Verify #
1520 ################
1521
1522 - lf_maven_verify: &lf_maven_verify
1523     name: lf-maven-verify
1524
1525     ######################
1526     # Default parameters #
1527     ######################
1528
1529     branch: master
1530     build-days-to-keep: 7
1531     build-timeout: 60
1532     disable-job: false
1533     git-url: "$GIT_URL/$PROJECT"
1534     github-url: "https://github.com"
1535     java-version: openjdk11
1536     mvn-global-settings: global-settings
1537     mvn-goals: clean deploy
1538     mvn-opts: ""
1539     mvn-params: "-Dstream=$STREAM -Dmaven.source.skip=true"
1540     mvn-version: mvn35
1541     stream: master
1542     submodule-recursive: true
1543     submodule-timeout: 10
1544     submodule-disable: false
1545
1546     gerrit_verify_triggers:
1547       - patchset-created-event:
1548           exclude-drafts: true
1549           exclude-trivial-rebase: false
1550           exclude-no-code-change: false
1551       - draft-published-event
1552       - comment-added-contains-event:
1553           comment-contains-value: '^Patch Set\s+\d+:\s+(recheck|reverify)\s*$'
1554
1555     gerrit_trigger_file_paths:
1556       - compare-type: REG_EXP
1557         pattern: ".*"
1558
1559     # github_included_regions MUST match gerrit_trigger_file_paths
1560     github_included_regions:
1561       - ".*"
1562
1563     #####################
1564     # Job Configuration #
1565     #####################
1566
1567     concurrent: true
1568     disabled: "{disable-job}"
1569
1570     builders:
1571       - lf-infra-pre-build
1572       - lf-jacoco-nojava-workaround
1573       - lf-maven-install:
1574           mvn-version: "{mvn-version}"
1575       - lf-update-java-alternatives:
1576           java-version: "{java-version}"
1577       - lf-provide-maven-settings:
1578           global-settings-file: "{mvn-global-settings}"
1579           settings-file: "{mvn-settings}"
1580       - lf-maven-build:
1581           mvn-goals: "{mvn-goals}"
1582       - lf-provide-maven-settings-cleanup
1583
1584     publishers:
1585       - findbugs
1586       - lf-jacoco-report
1587       - lf-infra-publish
1588
1589 - job-template:
1590     name: "{project-name}-maven-verify-{stream}-{mvn-version}-{java-version}"
1591     id: gerrit-maven-verify
1592     <<: *lf_maven_common
1593     # yamllint disable-line rule:key-duplicates
1594     <<: *lf_maven_verify
1595
1596     scm:
1597       - lf-infra-gerrit-scm:
1598           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1599           git-url: "{git-url}"
1600           refspec: "$GERRIT_REFSPEC"
1601           branch: "$GERRIT_BRANCH"
1602           submodule-recursive: "{submodule-recursive}"
1603           submodule-timeout: "{submodule-timeout}"
1604           submodule-disable: "{submodule-disable}"
1605           choosing-strategy: gerrit
1606
1607     triggers:
1608       - gerrit:
1609           server-name: "{gerrit-server-name}"
1610           trigger-on: "{obj:gerrit_verify_triggers}"
1611           projects:
1612             - project-compare-type: ANT
1613               project-pattern: "{project}"
1614               branches:
1615                 - branch-compare-type: ANT
1616                   branch-pattern: "**/{branch}"
1617               file-paths: "{obj:gerrit_trigger_file_paths}"
1618
1619 - job-template:
1620     name: "{project-name}-maven-verify-{stream}-{mvn-version}-{java-version}"
1621     id: github-maven-verify
1622     <<: *lf_maven_common
1623     # yamllint disable-line rule:key-duplicates
1624     <<: *lf_maven_verify
1625
1626     properties:
1627       - lf-infra-properties:
1628           build-days-to-keep: "{build-days-to-keep}"
1629       - github:
1630           url: "{github-url}/{github-org}/{project}"
1631
1632     scm:
1633       - lf-infra-github-scm:
1634           url: "{git-clone-url}{github-org}/{project}"
1635           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1636           branch: "$sha1"
1637           submodule-recursive: "{submodule-recursive}"
1638           submodule-timeout: "{submodule-timeout}"
1639           submodule-disable: "{submodule-disable}"
1640           choosing-strategy: default
1641           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1642
1643     triggers:
1644       - github-pull-request:
1645           trigger-phrase: "^(recheck|reverify)$"
1646           only-trigger-phrase: false
1647           status-context: "Maven Verify {mvn-version}-{java-version}"
1648           permit-all: true
1649           github-hooks: true
1650           white-list-target-branches:
1651             - "{branch}"
1652           included-regions: "{obj:github_included_regions}"
1653
1654 ###########################
1655 # Maven Verify for Docker #
1656 ###########################
1657
1658 - lf_maven_docker_verify: &lf_maven_docker_verify
1659     name: lf-maven-docker-verify
1660
1661     # image push not allowed during verification
1662     mvn-goals: clean install
1663
1664     builders:
1665       - lf-infra-pre-build
1666       - lf-jacoco-nojava-workaround
1667       - lf-maven-install:
1668           mvn-version: "{mvn-version}"
1669       - lf-update-java-alternatives:
1670           java-version: "{java-version}"
1671       - lf-infra-docker-login:
1672           global-settings-file: "{mvn-global-settings}"
1673           settings-file: "{mvn-settings}"
1674       # must provide maven settings AFTER docker due to its cleanup
1675       - lf-provide-maven-settings:
1676           global-settings-file: "{mvn-global-settings}"
1677           settings-file: "{mvn-settings}"
1678       - inject:
1679           properties-content: |
1680             CONTAINER_PULL_REGISTRY={container-public-registry}
1681       - lf-maven-build:
1682           mvn-goals: "{mvn-goals}"
1683       - lf-provide-maven-settings-cleanup
1684
1685 - job-template:
1686     name: "{project-name}-maven-docker-verify-{stream}-{mvn-version}-{java-version}"
1687     id: gerrit-maven-docker-verify
1688     <<: *lf_maven_common
1689     # yamllint disable-line rule:key-duplicates
1690     <<: *lf_maven_verify
1691     # yamllint disable-line rule:key-duplicates
1692     <<: *lf_maven_docker_verify
1693
1694     scm:
1695       - lf-infra-gerrit-scm:
1696           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1697           git-url: "{git-url}"
1698           refspec: "$GERRIT_REFSPEC"
1699           branch: "$GERRIT_BRANCH"
1700           submodule-recursive: "{submodule-recursive}"
1701           submodule-timeout: "{submodule-timeout}"
1702           submodule-disable: "{submodule-disable}"
1703           choosing-strategy: gerrit
1704
1705     triggers:
1706       - gerrit:
1707           server-name: "{gerrit-server-name}"
1708           trigger-on: "{obj:gerrit_verify_triggers}"
1709           projects:
1710             - project-compare-type: ANT
1711               project-pattern: "{project}"
1712               branches:
1713                 - branch-compare-type: ANT
1714                   branch-pattern: "**/{branch}"
1715               file-paths: "{obj:gerrit_trigger_file_paths}"
1716
1717 - job-template:
1718     name: "{project-name}-maven-docker-verify-{stream}-{mvn-version}-{java-version}"
1719     id: github-maven-docker-verify
1720     <<: *lf_maven_common
1721     # yamllint disable-line rule:key-duplicates
1722     <<: *lf_maven_verify
1723     # yamllint disable-line rule:key-duplicates
1724     <<: *lf_maven_docker_verify
1725
1726     properties:
1727       - lf-infra-properties:
1728           build-days-to-keep: "{build-days-to-keep}"
1729       - github:
1730           url: "{github-url}/{github-org}/{project}"
1731
1732     scm:
1733       - lf-infra-github-scm:
1734           url: "{git-clone-url}{github-org}/{project}"
1735           refspec: "+refs/pull/*:refs/remotes/origin/pr/*"
1736           branch: "$sha1"
1737           submodule-recursive: "{submodule-recursive}"
1738           submodule-timeout: "{submodule-timeout}"
1739           submodule-disable: "{submodule-disable}"
1740           choosing-strategy: default
1741           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1742
1743     triggers:
1744       - github-pull-request:
1745           trigger-phrase: "^(recheck|reverify)$"
1746           only-trigger-phrase: false
1747           status-context: "Maven Docker Verify {mvn-version}-{java-version}"
1748           permit-all: true
1749           github-hooks: true
1750           white-list-target-branches:
1751             - "{branch}"
1752           included-regions: "{obj:github_included_regions}"
1753
1754 #############################
1755 # Maven Verify Dependencies #
1756 #############################
1757
1758 - lf_maven_verify_dependencies: &lf_maven_verify_dependencies
1759     name: lf-maven-verify-dependencies
1760
1761     ######################
1762     # Default parameters #
1763     ######################
1764
1765     branch: master
1766     build-days-to-keep: 7
1767     build-timeout: 60
1768     disable-job: false
1769     git-url: "$GIT_URL/$PROJECT"
1770     github-url: "https://github.com"
1771     java-version: openjdk11
1772     mvn-global-settings: global-settings
1773     mvn-goals: clean deploy
1774     mvn-opts: ""
1775     mvn-params: "-Dstream=$STREAM"
1776     mvn-version: mvn35
1777     stream: master
1778     submodule-recursive: true
1779     submodule-timeout: 10
1780     submodule-disable: false
1781
1782     gerrit_verify_triggers:
1783       - comment-added-contains-event:
1784           comment-contains-value: "recheck: [0-9 ]+"
1785     gerrit_trigger_file_paths:
1786       - compare-type: ANT
1787         pattern: "**"
1788
1789     #####################
1790     # Job Configuration #
1791     #####################
1792
1793     concurrent: true
1794     disabled: "{disable-job}"
1795
1796     builders:
1797       - lf-infra-pre-build
1798       - lf-jacoco-nojava-workaround
1799       - lf-maven-install:
1800           mvn-version: "{mvn-version}"
1801       - lf-update-java-alternatives:
1802           java-version: "{java-version}"
1803       - lf-provide-maven-settings:
1804           global-settings-file: "{mvn-global-settings}"
1805           settings-file: "{mvn-settings}"
1806       - lf-fetch-dependent-patches
1807       - shell: !include-raw-escape:
1808           - ../shell/common-variables.sh
1809           - ../shell/maven-build-deps.sh
1810       - lf-maven-build:
1811           mvn-goals: "{mvn-goals}"
1812       - lf-provide-maven-settings-cleanup
1813
1814     publishers:
1815       - findbugs
1816       - lf-jacoco-report
1817       - lf-infra-publish
1818
1819 - job-template:
1820     name: "{project-name}-maven-verify-deps-{stream}-{mvn-version}-{java-version}"
1821     id: gerrit-maven-verify-dependencies
1822     <<: *lf_maven_common
1823     # yamllint disable-line rule:key-duplicates
1824     <<: *lf_maven_verify_dependencies
1825
1826     scm:
1827       - lf-infra-gerrit-scm:
1828           jenkins-ssh-credential: "{jenkins-ssh-credential}"
1829           git-url: "{git-url}"
1830           refspec: "$GERRIT_REFSPEC"
1831           branch: "$GERRIT_BRANCH"
1832           submodule-recursive: "{submodule-recursive}"
1833           submodule-timeout: "{submodule-timeout}"
1834           submodule-disable: "{submodule-disable}"
1835           choosing-strategy: gerrit
1836
1837     triggers:
1838       - gerrit:
1839           server-name: "{gerrit-server-name}"
1840           trigger-on: "{obj:gerrit_verify_triggers}"
1841           projects:
1842             - project-compare-type: ANT
1843               project-pattern: "{project}"
1844               branches:
1845                 - branch-compare-type: ANT
1846                   branch-pattern: "**/{branch}"
1847               file-paths: "{obj:gerrit_trigger_file_paths}"
1848           comment-text-parameter-mode: PLAIN